test-cluster-manager.iam.playground-tcm.dpa0.org
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 02:bb:f7:7d:ae:27:a4:e3:df:67:83:b2:9d:9b:7b:07 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=test-cluster-manager.iam.playground-tcm.dpa0.org
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:bb:f7:7d:ae:27:a4:e3:df:67:83:b2:9d:9b:7b:07Serial Number (int): 3634435216706579245470819144225749767
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: ed:d3:d2:61:8e:f8:30:28:60:34:0b:3d:ba:8b:1b:8e:32:d3:f5:07
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): c8:9e:39:06:5f:a7:d4:79:60:a4:b0:85:e3:30:e4:5f:3c:b6:fb:49
Fingerprint (sha256): 04:6b:49:0e:15:5e:ef:a1:19:a1:b7:c8:7f:ce:77:fd:2e:63:2e:47:38:de:71:f8:71:ff:45:e1:18:bd:cd:56
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate test-cluster-manager.iam.playground-tcm.dpa0.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test-cluster-manager.iam.playground-tcm.dpa0.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test-cluster-manager.iam.playground-tcm.dpa0.org
Other certificates including the domain name dpa0.org
(limited to 100 certificates)
storage.dailydeploy.dpa0.org
storage.perf3.dpa0.org
morev01.dpa0.org
api.azdiotest2.dpa0.org
*.dailydeploy.dpa0.org
*.internal.geofftest.dpa0.org
api.perf1.dpa0.org
api.devsandbox.dpa0.org
*.dailydeploy.dpa0.org
dailydeploy.dpa0.org
*.internal.geofftest.dpa0.org
*.dailydeploy.dpa0.org
miwilliams01.dpa0.org
storage.azdiotest2.dpa0.org
storage.devsandbox.dpa0.org
miwilliams01.dpa0.org
storage.geofftest.dpa0.org
azdiotest2.dpa0.org
storage.geofftest.dpa0.org
*.internal.perf1.dpa0.org
api.chkumar.dpa0.org
*.internal.geofftest.dpa0.org
api.miwilliams01.dpa0.org
nbachkethi01.dpa0.org
storage.miwilliams01.dpa0.org
storage.staging.dpa0.org
*.internal.azdiotest2.dpa0.org
miwilliams01.dpa0.org
api.azdiotest2.dpa0.org
*.azdiotest2.dpa0.org
storage.pvk.dpa0.org
morev01.dpa0.org
api.azdiotest.dpa0.org
*.internal.jbackus02.dpa0.org
api.dailydeploy.region.dpa0.org
dailydeploy.dpa0.org
storage.dailydeploy.dpa0.org
api.perf2.dpa0.org
storage.vkumarhc.dpa0.org
api.azdiotest2.dpa0.org
*.internal.jbackus02.dpa0.org
api.perf1.dpa0.org
api.azdiotest.dpa0.org
api.dailydeploy.region.dpa0.org
*.internal.geofftest.dpa0.org
*.internal.morev02.dpa0.org
perf2.dpa0.org
api.pcheung.dpa0.org
test-cluster-manager.iam.playground-tcm.dpa0.org
api.geofftest2.dpa0.org
*.dailydeploy.dpa0.org
dailydeploy.dpa0.org
*.internal.chkumar.dpa0.org
api.geofftest2.dpa0.org
test-cluster-manager.iam.playground-tcm.dpa0.org
api.nbachkethi01.dpa0.org
api.perf3.dpa0.org
*.internal.morev01.dpa0.org
api.presandbox.region.dpa0.org
*.perf2.dpa0.org
storage.azdiotest.dpa0.org
*.internal.azdiotest.dpa0.org
*.internal.geofftest.dpa0.org
syslog.perf3.dpa0.org
api.geofftest.dpa0.org
api.chkumar.dpa0.org
syslog.vkumarhc.dpa0.org
api.azdiotest.dpa0.org
storage.perf1.dpa0.org
syslog.vkumarhc.dpa0.org
*.devsandbox.dpa0.org
*.crash.internal.dailydeploy.dpa0.org
api.azdiotest2.dpa0.org
test-cluster-manager.iam.playground-tcm.dpa0.org
storage.azdiotest.dpa0.org
api.rpanchal.dpa0.org
api.devsandbox.dpa0.org
dailydeploy.dpa0.org
*.crash.internal.chkumar.dpa0.org
storage.vkumarhc.dpa0.org
dailydeploy.dpa0.org
api.geofftest.dpa0.org
azdiotest2.dpa0.org
devsandbox.dpa0.org
automationtesting.dev.dpa0.org
api.jbackus02.dpa0.org
storage.perf2.dpa0.org
*.internal.ap2.dpa0.org
none.azdiotest2.dpa0.org
*.internal.perf3.dpa0.org
api.delta.prototype.dpa0.org
storage.jbackus02.dpa0.org
*.internal.miwilliams01.dpa0.org
walbranj2.prototype.dpa0.org
*.internal.pvk.dpa0.org
*.dailydeploy.dpa0.org
storage.beta.prototype.dpa0.org
syslog.delta.prototype.dpa0.org
*.internal.jbackus01.dpa0.org
storage.playground.dpa0.org
storage.perf3.dpa0.org
morev01.dpa0.org
api.azdiotest2.dpa0.org
*.dailydeploy.dpa0.org
*.internal.geofftest.dpa0.org
api.perf1.dpa0.org
api.devsandbox.dpa0.org
*.dailydeploy.dpa0.org
dailydeploy.dpa0.org
*.internal.geofftest.dpa0.org
*.dailydeploy.dpa0.org
miwilliams01.dpa0.org
storage.azdiotest2.dpa0.org
storage.devsandbox.dpa0.org
miwilliams01.dpa0.org
storage.geofftest.dpa0.org
azdiotest2.dpa0.org
storage.geofftest.dpa0.org
*.internal.perf1.dpa0.org
api.chkumar.dpa0.org
*.internal.geofftest.dpa0.org
api.miwilliams01.dpa0.org
nbachkethi01.dpa0.org
storage.miwilliams01.dpa0.org
storage.staging.dpa0.org
*.internal.azdiotest2.dpa0.org
miwilliams01.dpa0.org
api.azdiotest2.dpa0.org
*.azdiotest2.dpa0.org
storage.pvk.dpa0.org
morev01.dpa0.org
api.azdiotest.dpa0.org
*.internal.jbackus02.dpa0.org
api.dailydeploy.region.dpa0.org
dailydeploy.dpa0.org
storage.dailydeploy.dpa0.org
api.perf2.dpa0.org
storage.vkumarhc.dpa0.org
api.azdiotest2.dpa0.org
*.internal.jbackus02.dpa0.org
api.perf1.dpa0.org
api.azdiotest.dpa0.org
api.dailydeploy.region.dpa0.org
*.internal.geofftest.dpa0.org
*.internal.morev02.dpa0.org
perf2.dpa0.org
api.pcheung.dpa0.org
test-cluster-manager.iam.playground-tcm.dpa0.org
api.geofftest2.dpa0.org
*.dailydeploy.dpa0.org
dailydeploy.dpa0.org
*.internal.chkumar.dpa0.org
api.geofftest2.dpa0.org
test-cluster-manager.iam.playground-tcm.dpa0.org
api.nbachkethi01.dpa0.org
api.perf3.dpa0.org
*.internal.morev01.dpa0.org
api.presandbox.region.dpa0.org
*.perf2.dpa0.org
storage.azdiotest.dpa0.org
*.internal.azdiotest.dpa0.org
*.internal.geofftest.dpa0.org
syslog.perf3.dpa0.org
api.geofftest.dpa0.org
api.chkumar.dpa0.org
syslog.vkumarhc.dpa0.org
api.azdiotest.dpa0.org
storage.perf1.dpa0.org
syslog.vkumarhc.dpa0.org
*.devsandbox.dpa0.org
*.crash.internal.dailydeploy.dpa0.org
api.azdiotest2.dpa0.org
test-cluster-manager.iam.playground-tcm.dpa0.org
storage.azdiotest.dpa0.org
api.rpanchal.dpa0.org
api.devsandbox.dpa0.org
dailydeploy.dpa0.org
*.crash.internal.chkumar.dpa0.org
storage.vkumarhc.dpa0.org
dailydeploy.dpa0.org
api.geofftest.dpa0.org
azdiotest2.dpa0.org
devsandbox.dpa0.org
automationtesting.dev.dpa0.org
api.jbackus02.dpa0.org
storage.perf2.dpa0.org
*.internal.ap2.dpa0.org
none.azdiotest2.dpa0.org
*.internal.perf3.dpa0.org
api.delta.prototype.dpa0.org
storage.jbackus02.dpa0.org
*.internal.miwilliams01.dpa0.org
walbranj2.prototype.dpa0.org
*.internal.pvk.dpa0.org
*.dailydeploy.dpa0.org
storage.beta.prototype.dpa0.org
syslog.delta.prototype.dpa0.org
*.internal.jbackus01.dpa0.org
storage.playground.dpa0.org
Certificate
The complete raw certificate details for test-cluster-manager.iam.playground-tcm.dpa0.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEnzCCA4egAwIBAgIQArv3fa4npOPfZ4OynZt7BzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIwNTAwMDAwMFoXDTI1MDEwMjIzNTk1OVowOzE5 MDcGA1UEAxMwdGVzdC1jbHVzdGVyLW1hbmFnZXIuaWFtLnBsYXlncm91bmQtdGNt LmRwYTAub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzxxyd/6 oon7olArFLc3vhCQ1b9AQ7NzROqBEqkjAdjUkJnVk5SBPQCjMzYeTrm4bf7tdV/J JTLFBtM6pou3b/ynvlylVhuft0GKzOkGaXsbwcjLK2LkQzrDNzHnTHdnOJ66l92S 8Jatnyc+Ku7P/nLM6yGcwH9zkCEu8myK0lBESZIeIi/wXDgyEjrxVvuhlrlnHh0k cPpzWLyf8P1p7sJ3Z9RZ5tPyFG0yoyLjUAPPv55s/u/sHXcM2uC2DAfZLKsEGPEF JHABb+Wb95yFXaPu7g3SF7E3xvTHEa0Ha3HZ8t1jbHUlTAHdRwKCkrVQwGt7BM/4 H5mZuo2yQ3zCFQIDAQABo4IBnDCCAZgwHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHO y+mc+XrrguIwHQYDVR0OBBYEFO3T0mGO+DAoYDQLPbqLG44y0/UHMDsGA1UdEQQ0 MDKCMHRlc3QtY2x1c3Rlci1tYW5hZ2VyLmlhbS5wbGF5Z3JvdW5kLXRjbS5kcGEw Lm9yZzATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6 Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcB AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0 LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5j b20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBAAiLw64wAStyiNyI5AAHWDlD8grWawabYO9aUo+7 2NvipNcH+l6h2GpZYheJQ6XlZ404eCQgxoF9OT20h+DU803EI4hcNZHuRaWw9lFk WtlNTVuBHlIQMHThBwv46sU7YOeBJWYfJFi1N+83q4WVHG/dVoZ3pHUn5fcoomL1 ZLL1Tx8i3o+E3sy7hHxSYNI2ZHZ/Rge+dOU1JAVcHTlucQxIQzFaTEWnQNOz/ze1 8trcnyOHcg2MlTGQ7xEnl9ntcj7gYLHAzZ8kmpgUnFfqokzVeuvcRuGFaY+ZdsCq YKlcfwGEZmC1/1lj5N057+NkcF9f7ZaDm5h9snwh6VNqqys= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzxxyd/6oon7olArFLc3 vhCQ1b9AQ7NzROqBEqkjAdjUkJnVk5SBPQCjMzYeTrm4bf7tdV/JJTLFBtM6pou3 b/ynvlylVhuft0GKzOkGaXsbwcjLK2LkQzrDNzHnTHdnOJ66l92S8Jatnyc+Ku7P /nLM6yGcwH9zkCEu8myK0lBESZIeIi/wXDgyEjrxVvuhlrlnHh0kcPpzWLyf8P1p 7sJ3Z9RZ5tPyFG0yoyLjUAPPv55s/u/sHXcM2uC2DAfZLKsEGPEFJHABb+Wb95yF XaPu7g3SF7E3xvTHEa0Ha3HZ8t1jbHUlTAHdRwKCkrVQwGt7BM/4H5mZuo2yQ3zC FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3634435216706579245470819144225749767 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-cluster-manager.iam.playground-tcm.dpa0.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25151228975491945296597578108080492935623854806965435021105436553784270909446470210005578189390401800239893986106156833331380240700268367745016944356403116609141495155174380961550166027104994408551662962756306451834578493452465474680783475735275589524043379945939194373365853378306752791282213131479623469039235080274910087345092043154246527381784091366876666682312137873084783175925851723009804375191054510950520885157645889627800899057627190484602108925316291513538663439999235194070755449974927262576500635917871275371841383450420015072137705185635214054157167921724624889026817148023147197365787741010975543575061 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) edd3d2618ef8302860340b3dba8b1b8e32d3f507 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cluster-manager.iam.playground-tcm.dpa0.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00088bc3ae30012b7288dc88e40007583943f20ad66b069b60ef5a528fbbd8dbe2a4d707fa5ea1d86a5962178943a5e5678d38782420c6817d393db487e0d4f34dc423885c3591ee45a5b0f651645ad94d4d5b811e52103074e1070bf8eac53b60e78125661f2458b537ef37ab85951c6fdd568677a47527e5f728a262f564b2f54f1f22de8f84deccbb847c5260d23664767f4607be74e53524055c1d396e710c4843315a4c45a740d3b3ff37b5f2dadc9f2387720d8c953190ef112797d9ed723ee060b1c0cd9f249a98149c57eaa24cd57aebdc46e185698f9976c0aa60a95c7f01846660b5ff5963e4dd39efe364705f5fed96839b987db27c21e9536aab2b